On Friday and Saturday, a series of events unfolded as a 13-block chain reorganization occurred on the Litecoin network, effectively reversing approximately 32 minutes of network activity. This was in response to an attack that leveraged a vulnerability within the Mimblewimble Extension Block (MWEB) protocol, allowing for a denial-of-service attack against major mining pools. The attackers exploited this bug to push through invalid MWEB transactions, which were later corrected by the network's longest valid chain. In response, Litecoin Core released version 0.21.5.4, which includes crucial security updates, and advised all users to upgrade.
According to the Litecoin Foundation, the bug was fully patched, and the network resumed normal operations by Sunday morning. However, security researchers have pointed out discrepancies in the timeline of events, suggesting that the vulnerability was known and patched privately a month before the attack.
This has raised concerns about the coordination and communication among mining pools and the potential for similar exploits in the future. The incident highlights the differences in how various blockchain networks respond to attacks, with newer chains often able to coordinate upgrades more quickly than older proof-of-work networks like Litecoin.